BEACON

← candidates

npm compasso @0.6.0

score
0.5815 med
flagged 2026-06-13 18:25
signals by category
content 1 cadence 1 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
content
provenance_dropped 0.8 prior version published with SLSA attestation; current version has none
cadence
rapid_release 0.8 6 versions in last 24h: ['0.4.1', '0.5.0', '0.5.1', '0.5.2', '0.6.0']
enrichment
repo_doesnt_exist 1.0 claimed repo Tchori-Labs/compasso returns 404 on github.com

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "victorcano"
  ],
  "versions": 7
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-Bfteb100Isa3U44tfC9PAFtEZwKTL1MBcR9OaZnMtmba7CHsiMUmyhq0E/mGlBC8o65lZIhvpGC4xZB0OmPfnw==",
    "tarball": "https://registry.npmjs.org/compasso/-/compasso-0.6.0.tgz",
    "unpackedSize": 4207252
  },
  "dist-tags": {
    "latest": "0.6.0"
  },
  "latest_version": "0.6.0",
  "maintainers": [
    {
      "email": "npm@tchori.net",
      "name": "victorcano"
    }
  ],
  "num_versions": 9,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/Tchori-Labs/compasso.git"
  },
  "scripts": {
    "build": "tsup",
    "lint": "eslint .",
    "prepublishOnly": "pnpm typecheck && pnpm test && pnpm build",
    "test": "vitest run",
    "test:update": "vitest run -u",
    "test:watch": "vitest",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "provenance_dropped": "prior version published with SLSA attestation; current version has none",
    "rapid_release": "6 versions in last 24h: ['0.4.1', '0.5.0', '0.5.1', '0.5.2', '0.6.0']",
    "repo_doesnt_exist": "claimed repo Tchori-Labs/compasso returns 404 on github.com"
  },
  "time": {
    "created": "2026-06-10T04:08:55.717Z",
    "modified": "2026-06-13T23:25:33.187Z"
  }
}